Installing and Upgrading Sentry for Policy File Authorization

Sentry stores the configuration as well as privilege policies in files. The sentry-site.xml file contains configuration options such as group association provider, privilege policy file location, and so on. The policy file contains the privileges and groups. It has a .ini file format and can be stored on a local file system or HDFS.

Sentry is plugged into Hive as session hooks which you configure in hive-site.xml. The vsentry package must be installed; it contains the required JAR files. You must also configure properties in the Sentry Configuration File.

Important:

If you have not already done so, install the Cloudera yum, zypper/YaST or apt repository before using the following commands. For instructions, see Installing the Latest CDH 5 Release.

Installing Sentry

Use the following the instructions, depending on your operating system, to install the latest version of Sentry.
Important:Configuration files

If you install a newer version of a package that is already on the system, configuration files that you have modified will remain intact.

If you uninstall a package, the package manager renames any configuration files you have modified from <file> to <file>.rpmsave. If you then re-install the package (probably to install a new version) the package manager creates a new <file> with
applicable defaults. You are responsible for applying any changes captured in the original configuration file to the new configuration file. In the case of Ubuntu and Debian upgrades, you will be
prompted if you have made changes to a file for which there is a new version; for details, see Automatic handling of configuration files by dpkg.

OS

Command

RHEL

$ sudo yum install sentry

SLES

$ sudo zypper install sentry

Ubuntu or Debian

$ sudo apt-get update;
$ sudo apt-get install sentry

Upgrading Sentry

If you are upgrading from CDH 5.x to the latest CDH release, see Installing Sentry to install the latest version.

If this documentation includes code, including but not limited to, code examples, Cloudera makes this available to you under the terms of the Apache License, Version 2.0, including any required
notices. A copy of the Apache License Version 2.0 can be found here.